TCP flood - Firewall [Windows] - Knowledgebase

Portal Home > Knowledgebase > Articles Database > TCP flood - Firewall [Windows]

TCP flood - Firewall [Windows]

Posted by sitefever, 04-18-2010, 03:31 PM
hello all At this moment i'm with BIG problems with tcp flood (syn) + - 1200 Ips hitting (flood) port of my application. anyone here know any good firewall that support this attack ? already tryed with almost , but without sucess :/ thanks.
Posted by jackpx, 04-18-2010, 04:10 PM
use visnetic firewall
Posted by arun_kris, 04-19-2010, 07:07 AM
Try this if you haven't tried- Save the following in 'syn_attack_protect.reg' and double click it to merge- Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] “EnableTCPChimney”=dword:00000000 “SynAttackProtect”=dword:00000002 “TcpMaxHalfOpen”=dword:00000064 “TcpMaxHalfOpenRetried”=dword:00000050 “TcpMaxPortsExhausted”=dword:00000005 “TcpMaxConnectResponseRetransmissions”=dword:00000003 I also recommend using Visnetic Firewall but it's payware. Thanks!
Posted by sitefever, 04-19-2010, 08:25 AM
tks for reply but i'm with windows x64 and this firewall = x32 do not work =/
Posted by arun_kris, 04-19-2010, 11:05 AM
What firewall do you use? Thanks!
Posted by sitefever, 04-19-2010, 02:27 PM
i'm using ipfw with custom rule to block it, but with a lot of flood it freeze and windows freeze too :/
Posted by arun_kris, 04-20-2010, 03:13 AM
If you already have tried the above steps for 'syn_attack_protect.reg' please ignore it. I'm not sure about 'wipfw' so can't comment here (I'll let other experts shed some lights in this). BTW, is your server fully managed or self-managed? If it's fully managed you can get assistance from your provider. Good luck! Thanks!

Add to Favourites Print this Article